In short: we collect what we need to teach you and run your paper account. We never sell your data, never ask for broker or bank logins, and you can delete your chats, tokens and account whenever you want.
1. Who we are
PaisaTrade ("we", "us") runs paisatrade.in, an education platform for the Indian stock market. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary for the personal data described here. We are not a broker and do not hold any real trading or bank account for you.
2. What we collect
You give us
- Account: name, email, mobile number (verified by a one-time code on WhatsApp or SMS) and a password. We store only a salted scrypt hash of the password.
- Learning and practice: course progress, quiz answers, certificates, paper orders, positions, watchlists and journal notes.
- Sensa: your questions, attached files and the answers, if chat history is on; plus your Sensa settings and research folders.
- MCP and API tokens: the token name, scopes, usage counts and last-used time. The token itself is stored only as a SHA-256 hash.
- Payments: plan, amount and the Razorpay order and payment IDs. Razorpay handles your card, UPI or bank details — we never receive them.
- Messages: contact-form messages, support emails and feedback-board posts and comments.
Collected automatically
- Technical data: IP address, browser and device type, pages requested and timestamps, kept in server logs for security and debugging.
- Error reports: if a page crashes, the error message, page path and app version, with a one-way hash of your IP for rate limiting.
- Browser storage: sign-in token, preferences and cached market data kept in your browser's local storage.
- Analytics: Google Analytics 4 on public pages (see section 5).
What we never ask for
- Broker or demat logins, bank passwords, card numbers, PAN or Aadhaar. Please don't share them in chats, attachments or posts.
3. How we use it
- To run your account, lessons, paper trading, Sensa, the screener and the MCP server.
- To enforce plan limits, prevent abuse and keep the service secure.
- To process purchases and send receipts and service emails (sign-in codes, password resets, important changes).
- To answer support requests and act on feedback.
- To understand which pages help learners and to fix bugs.
- To send product updates if you subscribe — every such email has an unsubscribe link.
- To meet legal obligations, such as tax records and lawful requests from authorities.
4. Sensa and AI apps
To answer a Sensa question we send your message, relevant context (for example your paper portfolio when you ask about it) and any attachment text to our AI model providers. They process it to generate the reply. You can turn off chat history in Sensa settings — new chats are then not saved — and you can delete single chats or all chats at any time.
When you connect an AI app through the PaisaTrade MCP server, that app receives the results of the tools it calls, which can include your paper portfolio or course progress. The app's own privacy policy applies to what it keeps. Revoke the token to stop access immediately.
7. Security
- All traffic uses HTTPS. Passwords and API tokens are stored as one-way hashes.
- Admin access uses individual accounts, supports two-factor authentication and is limited to people who need it.
- Logs redact personal connector URLs and secrets.
- If a breach affects your personal data we will inform you and the Data Protection Board of India as the DPDP Act requires.
8. How long we keep it
- Account, learning and practice data: while your account is open.
- After you ask us to delete your account: removed within 90 days, except records we must keep by law.
- Payment and invoice records: 8 years, as Indian tax law requires.
- Server logs and error reports: up to 90 days.
9. Your rights
Under the DPDP Act you can:
- Ask for a summary of the personal data we hold and how we use it.
- Correct or update it — most details can be changed in Settings.
- Ask us to erase it and close your account.
- Withdraw consent for optional uses such as product emails.
- Nominate someone to exercise these rights if you are unable to.
- Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.
Email privacy@paisatrade.in from your registered address. We reply within 30 days.
10. Children
PaisaTrade is for adults aged 18 and over. If you believe a child has created an account, write to us and we will delete it.
11. Changes to this policy
We update the date at the top of this page whenever the policy changes, and tell signed-in users about significant changes by email or in the app.
12. Grievance officer and contact
- Privacy and grievances: privacy@paisatrade.in
- General support: support@paisatrade.in or the Contact page
- Response: we acknowledge within 48 hours on business days and resolve within 30 days.